Systems Engineer, Lead Consultant Identity & Authentication - Remote

Overview

Lead consultant role on Allstate's Identity & Authentication engineering team, leading the research, design, planning and maintenance of network hardware and software components and resolving moderately to highly complex production incidents.

What you'll do

• Lead identifying and recommending major and significant changes for moderately complex network hardware and software components to avoid incidents.
• Resolve incidents and perform root cause analysis, escalating high complexity incidents and problems to provide future application, hardware and/or software resiliency.
• Lead efforts to ensure plans integrate effectively with other aspects of the technical hardware and software components.
• Lead support for production service requests, performing routine administration and supporting moderately complex network hardware and software infrastructure (e.g., Request Center, Change Order execution).
• Lead the effort to develop and maintain tools for maintaining, modifying, and monitoring hardware and software technology components.
• Lead implementation of moderately complex network hardware and software technology components by analyzing the current system environment and infrastructure, using technical tools and utilities, and performing complex product customizations.
• Lead execution of testing, debugging, performance analysis, and documentation of moderately complex hardware and software technology components.
• Collaborate to build consensus with other Engineers so modified hardware and software interacts appropriately, data conversion impacts are considered, and other areas of impact are addressed.
• Lead and initiate research, analysis, design, selection, planning, and engineering for moderately complex new components or enhancements to existing components.
• Help define and update items in the configuration management plan.

What you'll need

• 5+ years of experience designing, implementing, and supporting enterprise Identity and Access Management (IAM) solutions in complex hybrid environments.
• Advanced experience with Active Directory Domain Services (ADDS), Active Directory Federation Services (ADFS), Microsoft Entra ID, Active Directory Certificate Services (ADCS), and Hybrid Identity.
• Strong proficiency in PowerShell scripting, automation, APIs, Infrastructure as Code (IaC), and modern engineering practices.
• Experience with authentication and federation technologies including LDAP, Kerberos, SAML, OAuth, OpenID Connect (OIDC), WS-Federation, and certificate-based authentication.
• Experience administering and supporting Group Policy (GPO), Domain Name System (DNS), Windows Server Update Services (WSUS), and System Center Operations Manager (SCOM) in enterprise environments.
• Knowledge of identity security, Zero Trust principles, and identity governance.
• Strong analytical, troubleshooting, and problem-solving skills.
• Experience leading technical initiatives, mentoring engineers, and providing technical guidance across cross-functional teams.

Nice to have

• Experience with privileged access management, certificate lifecycle management, or cloud identity platforms.
• Experience with GitHub, CI/CD pipelines, Infrastructure as Code, and automation frameworks.
• Familiarity with AI-assisted development, intelligent automation, operational analytics, or emerging AI technologies.
• Preferred certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300); Microsoft Certified: Azure Administrator Associate (AZ-104); Microsoft Certified: Azure Security Engineer Associate (AZ-500); Microsoft Certified: Cybersecurity Architect Expert (SC-100).

Details

• Location: USA - IL (Remote).
• Compensation: 98,100.00 - 167,850.00 annually, based on experience and qualifications.
• Background investigation required for the offered candidate.
• Allstate generally does not sponsor individuals for employment-based visas for this position.
• No supervisory duties.
• Dedicated private workspace and reliable internet (minimum 50 MB download, 5 MB upload) required when working from home; camera on for virtual interviews and valid photo ID at the start of interview.